Known vulnerabilities in Moodle - page 23

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3544
CWE-79 Low
Available
No
2.4.11, 2.5.7, 2.6.4, 2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41442 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-3545
CWE-94 Low
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41443 - Permissions, Privileges, and Access Controls
CVE-2014-3546
CWE-264 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3547
CWE-79 Low
No
No
2.4.11, 2.5.7, 2.6.4, 2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3548
CWE-79 Low
No
No
2.4.11, 2.5.7, 2.6.4, 2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3549
CWE-79 Low
No
No
2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41447 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3550
CWE-79 Low
No
No
2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3551
CWE-79 Low
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41449 - Improper Authentication
CVE-2014-3552
CWE-287 Low
No
No
- 29.07.2014 SB2014072908
SB2014072108
#VU41450 - Permissions, Privileges, and Access Controls
CVE-2014-3553
CWE-264 Low
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41451 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-3541
CWE-94 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41452 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3542
CWE-200 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41453 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3543
CWE-200 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41610 - Cross-Site Request Forgery (CSRF)
CVE-2014-0213
CWE-352 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41611 - Improper Authentication
CVE-2014-0214
CWE-287 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41612 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0215
CWE-200 Low
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41613 - Permissions, Privileges, and Access Controls
CVE-2014-0216
CWE-264 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41614 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0217
CWE-200 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0218
CWE-79 Low
No
No
2.4.10, 2.5.6, 2.6.3 27.05.2014 SB2014052704
SB2014052114
#VU41900 - Permissions, Privileges, and Access Controls
CVE-2014-2572
CWE-264 Low
No
No
- 24.03.2014 SB2014032404


Showing elements 441 - 460 out of 618